Airlift vulnerabilities
We track 2 vulnerabilities in Airlift products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on December 12, 2025.
2vulnerabilities
0critical
2high
0exploited
8.1average CVSS score
Latest Airlift vulnerabilities
- 7.5 High severity
aircompressor: Out-of-bounds Read
Aircompressor is a library with ports of the Snappy, LZO, LZ4, and Zstandard compression algorithms to Java. In versions 3.3 and below, incorrect handling of malformed data in Java-based decompressor implementations for Snappy and LZ4 allow remote attackers to
- 8.6 High severity
aircompressor: Out-of-bounds Read
Aircompressor is a library with ports of the Snappy, LZO, LZ4, and Zstandard compression algorithms to Java. All decompressor implementations of Aircompressor (LZ4, LZO, Snappy, Zstandard) can crash the JVM for certain input, and in some cases also leak the co